[CM] [C2] Understanding the Crisis Management Plan

 Understanding the Crisis Management Plan

Introduction

A crisis places an organisation under extraordinary pressure.

Information may be incomplete, events may develop rapidly, stakeholders may demand immediate answers, and senior leaders may be required to make significant decisions in a short period.

In these circumstances, the organisation cannot afford to determine its crisis management structure, decision authority and response process for the first time during the crisis.

The Crisis Management Plan (CM Plan) provides the framework to support the organisation's strategic response.

It establishes how a potential crisis is escalated, who is responsible for leading the response, how the Crisis Management Team is activated, how decisions are made and how stakeholders are managed.

However, a CM Plan should not attempt to predict every crisis or prescribe every action. Its purpose is to provide sufficient structure for senior leaders to manage uncertainty and make timely, coordinated and defensible decisions.

This chapter explains the purpose of a Crisis Management Plan, what it should contain, how it relates to other organisational response plans and the principles that should guide its development.

What Is a Crisis Management Plan?

A Crisis Management Plan is a controlled document that provides the structure, authority, roles, procedures and supporting tools required to manage a crisis.

The plan supports the Crisis Management Team in coordinating the organisation's strategic response to a difficult or escalating situation.

During a crisis, the CM Plan should help senior leaders answer several fundamental questions:

• What has happened?
• What is currently known?
• What remains unknown?
• What may happen next?
• What does the situation mean for the organisation?
• Does the situation meet the criteria for a crisis?
• Who should lead the response?
• Who has decision-making authority?
• What are the immediate strategic priorities?
• What decisions must be made?
• Who must be informed?
• How will actions be coordinated?
• How will the organisation monitor the changing situation?
• How will recovery be managed?
• When can the Crisis Management Team stand down?

The CM Plan therefore acts as a strategic management framework during a crisis.

It does not replace leadership or professional judgement. Instead, it enables leaders to apply their judgement within an agreed structure.

Why Does an Organisation Need a Crisis Management Plan?

Organisations often assume that experienced senior managers will naturally know what to do during a crisis.

Experience is valuable, but a crisis creates conditions that make informal management difficult.

A major event may involve:

• Multiple departments
• Several locations
• Conflicting priorities
• Limited information
• Time-sensitive decisions
• Regulatory requirements
• Customer concerns
• Media scrutiny
• Third-party dependencies
• Significant financial exposure

Without an agreed plan, senior leaders may spend valuable time determining how to organise the response.

Questions may arise, such as:

• Who is in charge?
• Has the Crisis Management Team been formally activated?
• Who can close the facility?
• Who can suspend customer service?
• Who must notify the regulator?
• Who approves a public statement?
• Who records the decisions?
• Which department has priority for limited resources?
• When will the team meet again?

These questions should be addressed before a crisis occurs.

A CM Plan reduces avoidable confusion by establishing the organisation's crisis management arrangements in advance.

The Purpose of the Crisis Management Plan

The primary purpose of the CM Plan is to enable the organisation to maintain strategic control during a crisis.

The plan should support five important management requirements.

Establish Leadership

The plan identifies who leads the Crisis Management Team and who assumes leadership if the primary Crisis Leader is unavailable.

Establish Authority

The plan clarifies who can activate the Crisis Management Team and approve significant strategic actions.

Establish Coordination

The plan provides a structure for coordinating multiple departments and response teams.

Support Decision-Making

The plan provides a process for assessing the situation, identifying options, considering consequences and recording decisions.

Support Stakeholder Management

The plan establishes how the organisation identifies, prioritises and communicates with affected stakeholders.

A well-designed plan should allow the Crisis Management Team to move quickly from confusion to structured management.

The CM Plan as a Decision-Support Tool

One of the most important purposes of a CM Plan is to support strategic decision-making.

A crisis may require senior leaders to make decisions that are unusual, complex or potentially irreversible.

Examples include:

• Closing a major facility
• Suspending a critical service
• Recalling a product
• Evacuating employees
• Engaging law enforcement
• Notifying a regulator
• Making a public statement
• Activating an alternate operating location
• Approving emergency expenditure
• Terminating a supplier relationship
• Providing compensation to customers
• Accepting a temporary reduction in service levels

The plan cannot make these decisions for the Crisis Management Team.

Instead, it should help the team determine:

1. What is the issue?
2. What information is available?
3. What information is missing?
4. What are the available options?
5. What are the potential consequences?
6. What specialist advice is required?
7. Who has decision authority?
8. What decision has been made?
9. Why was the decision made?
10. What actions arise from the decision?

This approach is particularly important because decisions made during a crisis may later be reviewed by regulators, boards, auditors, courts, customers or the media.

The organisation should therefore be able to demonstrate that decisions were reasonable based on the information available at the time.

What a Crisis Management Plan Is Not

Understanding what a CM Plan is not is equally important.

The CM Plan Is Not a Prediction of Every Crisis

No organisation can predict every possible crisis.

Even when the crisis type is known, the exact sequence of events may differ significantly from previous incidents or exercise scenarios.

The plan should therefore provide a flexible management framework.

The CM Plan Is Not a Technical Incident Response Plan

A cyber incident response plan may describe how systems are isolated, malware is analysed and forensic evidence is preserved.

The CM Plan addresses the wider organisational consequences.

For example:

• Should customer service be suspended?
• Does the regulator need to be notified?
• What should customers be told?
• What is the organisation's recovery priority?
• What is the potential reputational impact?

The CM Plan Is Not a Business Continuity Plan

A Business Continuity Plan focuses on maintaining or recovering priority business activities following a disruption.

The Crisis Management Plan provides strategic oversight of the wider crisis.

The Crisis Management Team may determine which services receive priority, while business continuity teams implement the agreed continuity arrangements.

The CM Plan Is Not a Crisis Communication Plan

Crisis communication is an essential component of crisis management, but communication alone does not constitute the complete organisational response.

The CM Plan must also address leadership, governance, activation, decision-making, coordination and recovery.

The CM Plan Is Not a Contact Directory

Emergency contact details are useful, but a list of telephone numbers does not explain who leads, what authority exists or how strategic decisions are made.

The CM Plan Is Not a Policy

A Crisis Management Policy defines organisational intent, principles and governance expectations.

The CM Plan provides practical arrangements for managing an actual crisis.

The CM Plan Is Not a Substitute for Leadership

A plan can provide structure, but it cannot replace judgement, experience, courage or accountability.

The Crisis Leader and CMT members must still assess the situation and make decisions.

Relationship with Other Organisational Response Plans

The CM Plan normally operates alongside several specialised response plans.

These may include:

• Emergency Response Plan
• Incident Management Plan
• Cyber Incident Response Plan
• Business Continuity Plan
• Technology Disaster Recovery Plan
• Crisis Communication Plan
• Security Response Plan
• Evacuation Plan
• Pandemic or Public Health Plan
• Product Recall Plan
• Environmental Emergency Plan

The relationship between these plans should be clearly defined.

Operational Plans

Operational plans manage the immediate event.

For example, the Cyber Incident Response Team may:

• Identify malicious activity
• Isolate systems
• Preserve forensic evidence
• Contain the threat

Continuity and Recovery Plans

Business Continuity and Disaster Recovery Plans maintain or restore priority operations and technologies.

Crisis Management Plan

The CM Plan provides strategic direction and organisational coordination.

The Crisis Management Team may:

• Confirm strategic priorities
• Allocate resources
• Approve significant actions
• Manage regulatory exposure
• Coordinate stakeholder communication
• Direct recovery priorities

The plans should operate together rather than compete for control.

A useful principle is:

Operational teams manage the event. The Crisis Management Team manages the organisational consequences.

Key Principles for Developing a Crisis Management Plan

Several principles should guide the development of the CM Plan.

Keep the Plan Strategic

The plan should focus on senior management responsibilities.

Detailed technical instructions should remain in operational plans.

Keep the Plan Practical

The CMT should be able to locate important information quickly.

Avoid excessive background information.

Make Authority Clear

The plan should clearly identify who can:

• Activate the CMT
• Declare a crisis
• Approve strategic actions
• Approve communication
• Commit emergency expenditure
• Declare stand-down

Design for Uncertainty

The plan should support situations where information is incomplete.

Processes for identifying facts, assumptions and unknowns should be included.

Support Different Crisis Scenarios

The core CM Plan should be applicable to different crises.

Scenario-specific playbooks may provide additional guidance for selected threats.

Integrate Communication

Communication should be part of the crisis response process rather than an activity performed only after decisions have been made.

Include Recovery

The CM Plan should address the transition from active crisis response to recovery and normal management.

Make the Plan Accessible

The plan must remain available if normal systems, facilities or communication platforms are unavailable.

Recommended Structure of a Crisis Management Plan

A practical CM Plan may contain the following sections.

Section 1: Plan Administration

This section establishes document governance.

It may include:

• Plan owner
• Approval authority
• Version number
• Review date
• Distribution
• Document classification
• Amendment record

Section 2: Purpose, Scope and Objectives

This section explains:

• Why the plan exists
• What the plan covers
• Which organisational entities are included
• The objectives of Crisis Management

Section 3: Crisis Definition and Classification

This section defines:

• Incident
• Major incident
• Crisis
• Crisis levels
• Escalation indicators

The objective is to help the organisation recognise when strategic Crisis Management is required.

Section 4: Crisis Activation and Escalation

This section explains:

• Activation criteria
• Escalation process
• Activation authority
• Declaration of a crisis
• Initial notification requirements

Section 5: Crisis Management Team

This section identifies:

• CMT structure
• Core members
• Supporting members
• Alternates
• Subject Matter Experts

Section 6: Roles and Responsibilities

This section defines the responsibilities of:

• Crisis Leader
• Deputy Crisis Leader
• Crisis Coordinator
• CMT members
• Crisis Communication Lead
• Secretariat
• Supporting response teams

Section 7: Decision Authority

This section identifies who can approve major actions.

Examples may include:

• Facility closure
• Service suspension
• Emergency expenditure
• Public statements
• Regulatory notification
• Third-party mobilisation
• Crisis stand-down

Section 8: Notification and Mobilisation

This section explains:

• How CMT members are notified
• Acknowledgement requirements
• Mobilisation targets
• Primary and alternate meeting locations
• Virtual meeting arrangements
• Backup communication methods

Section 9: Crisis Command and Control

This section describes how the CMT operates.

It may include:

• Initial CMT meeting agenda
• Meeting frequency
• Situation reporting
• Action management
• Decision logging
• Information management

Section 10: Crisis Response Process

A structured response process may include:

Activate → Assess → Stabilise → Decide → Communicate → Monitor → Recover

This sequence provides a common approach across different crisis scenarios.

Section 11: Crisis Communication

This section establishes:

• Stakeholder identification
• Communication responsibilities
• Message approval
• Spokesperson arrangements
• Media management
• Employee communication
• Customer communication
• Regulatory communication

Section 12: Recovery and Stand-Down

This section defines:

• Crisis stabilisation criteria
• Stand-down authority
• Transition to recovery
• Outstanding action management
• Stakeholder follow-up
• Return-to-normal arrangements

Section 13: Scenario-Specific Playbooks

Playbooks may be developed for priority scenarios such as:

• Cyberattack
• Data breach
• Severe weather
• Supply-chain disruption
• Workplace fatality
• Product safety incident
• Public health crisis
• Major facility loss

Section 14: Forms and Supporting Tools

Useful tools may include:

• Initial Crisis Notification Form
• Situation Report
• Crisis Action Log
• Crisis Decision Log
• Communication Log
• Stakeholder Matrix
• CMT Meeting Agenda
• Stand-Down Checklist

Section 15: Testing and Maintenance

This section explains how the plan will be:

• Reviewed
• Updated
• Exercised
• Audited
• Improved

Designing the Plan for Use Under Pressure

The CM Plan must be designed for the conditions in which it will be used.

During a crisis, participants may be:

• Under significant stress
• Working with incomplete information
• Managing multiple stakeholders
• Attending frequent meetings
• Receiving constant updates
• Making time-sensitive decisions

The plan should therefore be easy to navigate.

Use Clear Headings

CMT members should be able to locate activation, communication or stand-down procedures quickly.

Use Checklists

Checklists support consistent action during periods of high workload.

Use Tables

Tables are useful for:

• Roles
• Decision authority
• Stakeholders
• Activation criteria
• Actions

Use Process Flows

Process diagrams can clarify:

• Escalation
• Activation
• Notification
• Decision-making
• Recovery

Use Action-Oriented Language

Instead of:

“Consideration should be given to regulatory notification.”

Use:

“Compliance Lead assesses regulatory notification requirements and advises the Crisis Leader.”

Avoid Long Narrative Sections

Background explanations may be useful during training but are often difficult to use during a crisis.

Detailed guidance can be maintained in supporting manuals or training materials.

Developing the Crisis Management Plan Table of Contents

Before drafting the full plan, the planning team should develop and agree on the Table of Contents.

This is an important implementation step.

The planning team should ask:

• Does the structure reflect how the organisation manages crises?
• Can a CMT member quickly locate activation procedures?
• Are decision authorities documented?
• Is communication integrated?
• Are supporting response teams recognised?
• Is recovery included?
• Are scenario-specific procedures required?
• Are logs and forms available?

The Table of Contents should be reviewed with key CMT members.

This review helps ensure that the plan structure is agreed before significant drafting work begins.

Plan Ownership and Responsibilities

The CM Plan should have a designated owner.

The Plan Owner is generally responsible for:

• Coordinating plan development
• Maintaining the document
• Managing version control
• Updating contact information
• Coordinating reviews
• Organising training
• Supporting exercises
• Tracking improvement actions

However, the Plan Owner should not develop the entire plan alone.

Relevant departments should contribute to sections affecting their responsibilities.

For example:

• Legal should review the decision and legal considerations.
• Compliance should review the regulatory notification.
• Communications should develop crisis communication arrangements.
• Human Resources should review employee procedures.
• Technology should confirm technology interfaces.
• Business Continuity should align continuity arrangements.
• Senior management should confirm authority and governance.

The CM Plan should be an organisational plan rather than a document owned by one specialist department.

Reviewing the Draft Crisis Management Plan

Once the draft plan is developed, it should undergo a structured review.

The review should consider five areas.

Completeness

Does the plan contain all required sections?

Accuracy

Are roles, contact details and authority correct?

Consistency

Does the CM Plan align with other organisational plans?

Practicality

Can the CMT realistically perform the documented procedures?

Usability

Can users quickly locate and understand the information?

The review should involve actual CMT members.

A plan should not be approved solely because the document appears professionally written.

The individuals expected to use the plan should confirm that it is practical.

Common Weaknesses in Crisis Management Plans

Several weaknesses frequently appear in CM Plans.

The Plan Is Too Long

Important procedures are hidden within extensive narrative content.

Roles Are Generic

Statements such as “senior management will manage the crisis” do not define responsibility.

Authority Is Unclear

The plan identifies responsibilities but does not explain who can approve significant actions.

Activation Criteria Are Vague

Terms such as “serious incident” or “major impact” are not defined.

Communication Is Separate from Decision-Making

The communication team is informed too late.

Operational and Strategic Responsibilities Are Mixed

The CMT becomes responsible for technical or operational tasks.

Recovery Is Poorly Defined

The plan focuses on the first few hours but does not explain stand-down or transition to recovery.

Forms Are Missing

The plan requires that decisions and actions be recorded but provides no practical tools.

The Plan Is Inaccessible

The only copy is stored on the corporate network.

The Plan Has Never Been Used

A plan may remain untested for several years.

These weaknesses should be identified through plan review and exercises.

Practical Workshop: Developing the CM Plan Structure

The planning team should conduct a CM Plan structure workshop.

Step 1: Review the Planning Context

Confirm:

• Scope
• Objectives
• Stakeholders
• Governance

Step 2: Identify Required Plan Sections

Develop the proposed Table of Contents.

Step 3: Assign Section Owners

Identify who is responsible for providing content.

Step 4: Confirm Interfaces

Identify supporting plans and teams.

Step 5: Review Decision Authority

Confirm which strategic decisions must be documented.

Step 6: Identify Required Tools

List forms, checklists and logs.

Step 7: Review with CMT Members

Ask potential users whether the proposed structure is practical.

Workshop Output

The output should be an approved Crisis Management Plan Structure and Table of Contents.

This becomes the framework for developing the remaining sections of the plan.

Questions for the Planning Team

Before proceeding to detailed crisis scenario planning, the organisation should answer:

1. What is the purpose of our CM Plan?
2. Who is expected to use the plan?
3. What level of management does the plan support?
4. What other plans interface with the CM Plan?
5. Who owns the plan?
6. Who approves the plan?
7. How will the plan support strategic decisions?
8. Is decision authority clearly documented?
9. Is Crisis Communication integrated?
10. Does the plan address recovery and stand-down?
11. Can the plan be accessed if normal systems fail?
12. Has the proposed Table of Contents been reviewed by CMT members?

If these questions cannot be answered, further plan design work is required.

Conclusion

The Crisis Management Plan is the central management framework supporting an organisation's strategic response to a crisis.

Its purpose is not to predict every event or provide a script for senior leaders. Its purpose is to establish the structure, authority, coordination arrangements and decision-support processes required when normal management procedures are no longer sufficient.

An effective CM Plan clearly explains when the Crisis Management Team should be activated, who leads the response, what authority exists, how the team operates and how decisions, actions and communication are coordinated.

The plan must also integrate with operational incident response, business continuity, technology recovery and other specialised plans. Operational teams manage the immediate event, while the Crisis Management Team manages the wider organisational consequences.

The quality of the CM Plan should ultimately be judged by its usability. When a crisis occurs, the key question is not whether the plan is comprehensive or professionally presented. The key question is:

Can the Crisis Management Team use the plan to determine what to do next?

With the purpose and structure of the Crisis Management Plan established, the organisation can proceed to identify the threats and crisis scenarios that the plan must be capable of managing.

More Information About Crisis Management Blended/ Hybrid Learning Courses

To learn more about the course and schedule, click the buttons below for the  CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].

	Please feel free to send us a note if you have any questions.